A "security engineered" downloader design is Thandy. https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Thandy http://google-opensource.blogspot.de/2009/03/thandy-secure-update-for-tor.html
Still, I agree that a less 'perfect' installer might be easier to put together and actually get into use, if you combine the product with a larger "SECURE DOWNLOADS NOW" campaign that teaches people about signatures and the possible attacks, with a nice video, and a nice comic strip. Thinking about it, a nicely crafted comic strip could feature different aspects of secure communication, and be reused for multiple issues/stories/campaigns (HTTPS, Tor, PGP, OTR, ...). -- Moritz Bartl https://www.torservers.net/ -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at [email protected] or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech
